Penetration Testing mailing list archives
Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME]
From: Trygve Aasheim <trygve () pogostick net>
Date: Mon, 15 Sep 2008 10:14:21 +0200
Goes into my collection of terrible scenarios...a company that doesn't follow any guidelines on good security at all.
Helpdesk employee with access to shadow files on servers? Wake up...Helpdesk employee that forwards sensitive information to @hotmail accounts on request from people that actually say they don't work there?
Hard to belive. That company has bigger issues than OOO. Sorry, but it sounds like a fib.... If it is true, then holy... Cheers, T Michael Boman wrote:
On Sun, Sep 14, 2008 at 10:19 PM, Jon Kibler <Jon.Kibler () aset com> wrote:Okay, since I started this, you're on! Real world example...That one goes into my collection of good scenarios. Thanks for sharing. Best regards Michael Boman
------------------------------------------------------------------------ This list is sponsored by: CenzicTop 5 Common Mistakes in Securing Web Applications
Get 45 Min Video and PPT Slides www.cenzic.com/landing/securityfocus/hackinar ------------------------------------------------------------------------
Current thread:
- OOO FLAME Jon Kibler (Sep 13)
- RE: OOO FLAME Erin Carroll (Sep 13)
- Re: OOO FLAME Martin Zember (Sep 14)
- Re: OOO FLAME Tim (Sep 14)
- WRAP-UP - RE: OOO FLAME Erin Carroll (Sep 14)
- Re: OOO FLAME Razi Shaban (Sep 13)
- <Possible follow-ups>
- Re: OOO FLAME ray . hawkins (Sep 14)
- RE: OOO FLAME Erin Carroll (Sep 14)
- EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Jon Kibler (Sep 14)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Michael Boman (Sep 14)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Trygve Aasheim (Sep 15)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Jon Kibler (Sep 16)
- RE: OOO FLAME Erin Carroll (Sep 14)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Tim March (Sep 14)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] R. DuFresne (Sep 15)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] David Howe (Sep 16)
- RE: OOO FLAME Erin Carroll (Sep 13)
- Message not available
- EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Pablo Cardoso (Sep 15)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Tim March (Sep 15)
- RE: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Ashvin Oogorah (Sep 16)
- Questionable Security Policy [WAS: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME]] Veal, Richard (Sep 16)
- RE: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Hill, Pete (Sep 16)
- Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME] Tim March (Sep 16)